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- The MAILING DATE of this communication appears on the cover sheet with the correspondence address - 
Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

• Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1)S Responsive to communication(s) filed on 23 January 2006 . 
2a)E3 This action is FINAL. 2b)D This action is non-final. 

3) Q Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 

Disposition of Claims 

4) H Claim(s) 1,3-9,11-15 and 17-20 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) E3 Claim(s) 1.3-9.11-15 and 17-20 is/are rejected. 

7) D Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10) Q The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1.85(a). 
Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 

11) D The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12) D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 
a)D All b)D Some * c)D None of: 

1 .□ Certified copies of the priority documents have been received. 

2. Q Certified copies of the priority documents have been received in Application No. . 

3. Q Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 

1. Claims 1, 3-9, 11-15, and 17-20 are pending in this office action. Claims 2, 10, 
and 16 are newly canceled. 

2. Applicant's arguments, filed January 23, 2006, have been fully considered but 
they are not persuasive. 

Claim Rejections 

3. The text of those sections of Title 35, U.S. Code not included in this action can 
be found in a prior Office action. 

Claim Rejections - 35 USC § 103 

4. Claims 1. 7-9. 11. and 13-15 are rejected under 35 U.S. C. 103(a) as being 
unpatentable over Dent (U.S. Patent Pub. No. 2001/0005695) in view of Billstrom (U.S. 
Patent No. 5,729,537). 

Regarding claims 1 and 15 . Dent teaches an architecture/method for confirming 
the identity of a message sender on a remote services system, comprising: 

• A communications module operable to transmit a message (fig. 3, ref. num 43); 

• A mid-level manager operating in conjunction with said communications module 
for controlling the flow of messages in said remote services system and for 
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verifying the identity of a sender by comparing first and second data identities in 
said data stream (fig. 4, re! 73). 

Dent does not teach a cryptographic module in said communications module for 
providing encryption of a data stream in said message, wherein said first data identity 
comprises data in a network software layer, said second identity comprises data 
in an application software layer. 

Billstrom teaches a cryptographic module in said communications module for 
providing encryption of a data stream in said message (col. 9, lines 39-50), wherein 
said first data identity comprises data in a network software layer, said second 
identity comprises data in an application software layer (col. 10, lines 18-32 and 
col. 12, lines 13-31). 

It would have been obvious to one of ordinary skill in the art, at the time the 
invention was made, to combine encrypting the data stream and obtaining identities 
from a network software layer and an application software layer, as taught by 
Billstrom , with the architecture/method of Dent . It would have been obvious for such 
modifications because a transmitted data stream could be monitored by unauthorized 
persons; encrypting prevents any intelligible information from being derived from such 
transmission. 
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Regarding claim 9 , Dent teaches a method of confirming the identity of a 
message sender on a remote services system, comprising: 

• Obtaining a first identity related to a message, said first identity being obtained in 
said remote services system (fig. 4, ref. num 65); 

• Obtaining a second identity related to the sender of a message, said second 
identity being obtained in said remote services system (fig. 4, ref. num 71); and 

• Comparing said first identity with said second identity to verify the identity of the 
sender of said message (fig. 4, ref. num 73). 

Dent does not specifically teach the identities being obtained from a network 
software layer and an application software layer. 

Billstrom teaches obtaining identities from a network software layer and an 
application software layer (col. 10, lines 18-32 and col. 12, lines 13-31). 

It would have been obvious to one of ordinary skill in the art, at the time the 
invention was made, to combine obtaining identities from a network software layer 
and an application software layer, as taught by Billstrom , with the method of Dent . It 
would have been obvious for such modifications because the identities in a software 
layer consist of a password in a browser or a network ID of a packet; both are common 
identification methods, and both provide an identity of a particular data. 
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Regarding claim 11 , Dent as modified by Billstrom teaches further comprising 
encrypting said message and said identities in an encryption module in said remote 
services system (see col. 9, lines 39-50 of Billstrom). 

Regarding claims 7, 8, 13, and 14 , the examiner takes official notice that wherein 
transmission of said message is conditioned on HTTP and on an email protocol is 
obvious. It would have been obvious based on the above combinations because the 
application layer is known to consist of SMTP and HTTP, the common mail protocol and 
browser protocol. 

Claims 3-6, 12, and 17-20 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Dent (U.S. Patent Pub. No. 2001/0005695) in view of Billstrom 
(USPN '537), and further in view of Belfiore et al. (U.S. Patent Pub. No. 2002/0059425). 

Regarding claims 3, 12, and 17 , Dent as modified by Billstrom teaches all the 
limitations of claims 1,9, 11, and 15, above. However, the combination does not teach 
said cryptographic module using secure socket layer encryption. 



Belfiore et al. teaches said cryptographic module using secure socket layer 
encryption (paragraph 0211). 
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It would have been obvious to one of ordinary skill in the art, at the time the 
invention was made, to combine using SSL encryption, as taught by Belfiore et al. , with 
the method of Dent/Billstrom . It would have been obvious for such modifications 
because SSL is beneficial in a browser based system, such as the applications of 
Billstrom. 

Regarding claims 4 and 18 , Dent as modified by Billstrom teaches all the 
limitations of claims 1,15, and 17, above. However, the combination does not teach 
said mid-level manager controlling data flow between a customer proxy and an 
applications server. 

Belfiore et al teaches said mid-level manager controlling data flow between a 
customer proxy and an applications server (paragraph 0213). 

It would have been obvious to one of ordinary skill in the art, at the time the 
invention was made, to combine controlling flow between a proxy and a server, as 
taught by Belfiore et aL with the method of Dent/Billstrom . It would have been obvious 
for such modifications because proxies are known to provide connections on behalf of a 
user; controlling flow between a proxy and a server would be advantageous because a 
user may not be authenticated to access the server. 
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Regarding claims 5 and 19 , Dent as modified by Billstrom/Belfiore et al. teaches 
wherein said mid-level manager is a customer mid-level manager (see paragraph 0213 
of Belfiore et al.). 

Regarding claims 6 and 20 , Dent as modified by Billstrom/Belfiore et al. teaches 
wherein said mid-level manager is an aggregation mid-level manager (see paragraph 
0213 of Belfiore etal.). 

Response to Arguments 

5. Applicant amends claims 1 , 9, and 1 5. 

6. Applicant argues the combination of references do not teach verifying identities 
obtained from a network software layer and an application software layer (page 2). 

Regarding applicant's argument, examiner disagrees. Billstrom teaches, on col. 
10, lines 18-32, that a network software layer is used to get an identity. The passage 
continues by giving an example of a network software layer identity, such as IP. 
Billstrom also teaches, on col. 12, lines 13-31, that an application software layer is used 
to get an identity. 

Conclusion 

7. Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 
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§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Brandon S. Hoffman whose telephone number is 571- 
272-3863. The examiner can normally be reached on M-F 8:30 - 5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz R. Sheikh can be reached on 571-272-3795. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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